Actions
Submit #2780
closed
[PATCH] Optionally allow IPv6 ND packets from non-neighbours
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Networking
Target version:
-
Start date:
01/29/2015
Due date:
% Done:
100%
Estimated time:
Description
IPv6 code discards ND packets from non-neighbours, which is believed to be correct, but breaks ND on some configurations (VULTR ipv6 for example). Hence the patch, it makes this behaviour optional (via sysctl). Default is old behaviour (discard those packets), accepting such ND packets can be insecure.
Useful links:
https://www.freebsd.org/security/advisories/FreeBSD-SA-08:10.nd6.asc
https://www.mail-archive.com/misc@openbsd.org/msg119029.html
Obtained-from: FreeBSD
Files
Updated by dillon almost 10 years ago
- Status changed from New to Closed
- % Done changed from 0 to 100
Ok, it defaults to off as is basically identical to what FreeBSD did so I've committed it.
-Matt
Actions